Nixpkgs security tracker

Untriaged

Permalink CVE-2014-8182

created 2 months ago Activity log

Created suggestion 2 months ago

An off-by-one error leading to a crash was discovered in …

An off-by-one error leading to a crash was discovered in openldap 2.4 when processing DNS SRV messages. If slapd was configured to use the dnssrv backend, an attacker could crash the service with crafted DNS responses.

References

https://security-tracker.debian.org/tracker/CVE-2014-8182 x_transferredx_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8182 x_transferredx_refsource_MISC
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2014-8182 x_transferredx_refsource_MISC
https://access.redhat.com/security/cve/cve-2014-8182 x_transferredx_refsource_MISC

Affected products

openldap

==2.4

Matching in nixpkgs

pkgs.openldap

Open source implementation of the Lightweight Directory Access Protocol

nixos-unstable 2.6.9
- nixpkgs-unstable 2.6.9
- nixos-unstable-small 2.6.9
nixos-25.11 2.6.9
- nixos-25.11-small 2.6.9
- nixpkgs-25.11-darwin 2.6.9

Package maintainers

@mweinelt Martin Weinelt <hexa@darmstadt.ccc.de>
@helsinki-Jo Joachim Ernst <joachim.ernst@helsinki-systems.de>
@Conni2461 Simon Hauser <simon-hauser@outlook.com>
@dasJ Janne Heß <janne@hess.ooo>

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.openldap

Package maintainers